瀏覽代碼

manifests,e2e: reduce cluster role permissions (#211)

Since Kilo now uses the `kilo.squat.ai/discovered-endpoints` annotation
for Peer discovery, Kilo no longer needs to update Peer resources, so we
can remove this permission from the ClusterRole. Note, the RBAC in the
manifests is not used today, but we eventually want to migrate to this.

Signed-off-by: Lucas Servén Marín <lserven@gmail.com>
Lucas Servén Marín 5 年之前
父節點
當前提交
abecadf707

+ 0 - 1
e2e/kilo-kind-userspace.yaml

@@ -57,7 +57,6 @@ rules:
   - peers
   - peers
   verbs:
   verbs:
   - list
   - list
-  - update
   - watch
   - watch
 - apiGroups:
 - apiGroups:
   - apiextensions.k8s.io
   - apiextensions.k8s.io

+ 0 - 1
manifests/kilo-bootkube-flannel.yaml

@@ -23,7 +23,6 @@ rules:
   - peers
   - peers
   verbs:
   verbs:
   - list
   - list
-  - update
   - watch
   - watch
 - apiGroups:
 - apiGroups:
   - apiextensions.k8s.io
   - apiextensions.k8s.io

+ 0 - 1
manifests/kilo-bootkube.yaml

@@ -57,7 +57,6 @@ rules:
   - peers
   - peers
   verbs:
   verbs:
   - list
   - list
-  - update
   - watch
   - watch
 - apiGroups:
 - apiGroups:
   - apiextensions.k8s.io
   - apiextensions.k8s.io

+ 0 - 1
manifests/kilo-k3s-flannel.yaml

@@ -23,7 +23,6 @@ rules:
   - peers
   - peers
   verbs:
   verbs:
   - list
   - list
-  - update
   - watch
   - watch
 - apiGroups:
 - apiGroups:
   - apiextensions.k8s.io
   - apiextensions.k8s.io

+ 0 - 1
manifests/kilo-k3s-userspace-heterogeneous.yaml

@@ -58,7 +58,6 @@ rules:
   - peers
   - peers
   verbs:
   verbs:
   - list
   - list
-  - update
   - watch
   - watch
 - apiGroups:
 - apiGroups:
   - apiextensions.k8s.io
   - apiextensions.k8s.io

+ 0 - 1
manifests/kilo-k3s-userspace.yaml

@@ -57,7 +57,6 @@ rules:
   - peers
   - peers
   verbs:
   verbs:
   - list
   - list
-  - update
   - watch
   - watch
 - apiGroups:
 - apiGroups:
   - apiextensions.k8s.io
   - apiextensions.k8s.io

+ 0 - 1
manifests/kilo-k3s.yaml

@@ -57,7 +57,6 @@ rules:
   - peers
   - peers
   verbs:
   verbs:
   - list
   - list
-  - update
   - watch
   - watch
 - apiGroups:
 - apiGroups:
   - apiextensions.k8s.io
   - apiextensions.k8s.io

+ 0 - 1
manifests/kilo-kubeadm-flannel.yaml

@@ -23,7 +23,6 @@ rules:
   - peers
   - peers
   verbs:
   verbs:
   - list
   - list
-  - update
   - watch
   - watch
 - apiGroups:
 - apiGroups:
   - apiextensions.k8s.io
   - apiextensions.k8s.io

+ 0 - 1
manifests/kilo-kubeadm.yaml

@@ -57,7 +57,6 @@ rules:
   - peers
   - peers
   verbs:
   verbs:
   - list
   - list
-  - update
   - watch
   - watch
 - apiGroups:
 - apiGroups:
   - apiextensions.k8s.io
   - apiextensions.k8s.io

+ 0 - 1
manifests/kilo-typhoon-flannel.yaml

@@ -23,7 +23,6 @@ rules:
   - peers
   - peers
   verbs:
   verbs:
   - list
   - list
-  - update
   - watch
   - watch
 - apiGroups:
 - apiGroups:
   - apiextensions.k8s.io
   - apiextensions.k8s.io

+ 0 - 1
manifests/kilo-typhoon.yaml

@@ -57,7 +57,6 @@ rules:
   - peers
   - peers
   verbs:
   verbs:
   - list
   - list
-  - update
   - watch
   - watch
 - apiGroups:
 - apiGroups:
   - apiextensions.k8s.io
   - apiextensions.k8s.io